Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json)
Hash identifier: q6E4Z1po6PbS0WJMmcL9Fdgdh3Z5FOfa5ke7ssmXx6U=
Subject key identifier: D8:1F:D2:FD:AE:ED:36:0A:41:74:F0:B9:D4:84:4B:56:23:43:FF:D0
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01A11D1A8CCA81324BA53D88ABBB9BB188A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
Manifest number: 1A9C
Signing time: Thu 08 Oct 2026 20:00:41 +0000
Manifest this update: Thu 08 Oct 2026 20:00:41 +0000
Manifest next update: Fri 09 Oct 2026 20:00:41 +0000
Files and hashes: 1: 0z9citdXF8752nMEZiQ4oSMIADQ.roa (hash: JsB61vUCFnFWtGQaFlnVeeC8gXBCxefSLsjNjYyY9/g=)
2: 1QDofdrdxn1wg6XblVl9BvBWUmc.roa (hash: 8Sto9TSm0VzEJfpih+W00AHEzAW1aUXacQ7edZT+jK8=)
3: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (hash: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs=)
4: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: C820Cmz5QwLjyqeSVV0A+a4qhmaBjidbDCMRdhfzRJQ=)
5: mYZ-CoJ30ryRjfCq_ZwrN2mkqqU.roa (hash: yzaoDw2vJVnlrfgQa+Wm4W0pkL/1ud5VYXRkIehmaa4=)
6: qBMQ_OTzlhMPTgYD0x98v7ieh-M.roa (hash: srAfkImn91GUj6UJibeFHF6TEzTA92kUfQ1mQv9UhIQ=)
7: vivzNK4w1TVYnua5SgoJCXmDNng.roa (hash: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:8c:ca:81:32:4b:a5:3d:88:ab:bb:9b:b1:88:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Oct 8 20:00:41 2026 GMT
Not After : Oct 9 20:00:41 2026 GMT
Subject: CN=d81fd2fdaeed360a4174f0b9d4844b562343ffd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:a7:96:a2:3c:56:38:4b:bd:71:9e:2a:17:
1d:81:53:64:77:bd:ed:11:7a:a8:c5:47:3d:11:74:
f3:e0:24:81:56:eb:a1:b3:a2:30:3d:ed:bb:a8:bf:
a7:9b:19:26:98:55:eb:e3:95:06:61:f2:bb:b9:71:
c4:b4:4d:4d:07:5e:a7:0c:2b:19:1e:dc:0b:9e:28:
a0:b8:a5:f3:df:84:4a:e1:d8:35:78:e4:66:7f:a2:
78:da:e2:dd:ff:f3:d1:d1:8b:c6:31:8d:00:98:4b:
25:d4:c8:74:6c:fa:5c:78:2f:55:40:b3:7e:bd:39:
f4:ba:c6:00:3e:f8:2e:73:b9:48:ff:62:dc:af:bb:
32:fe:a4:cf:64:43:85:3b:2b:46:78:f2:60:a9:89:
77:22:74:22:a1:5e:1d:f5:44:0e:88:94:7a:8d:e0:
b6:c7:5f:7c:16:45:35:87:5b:c2:fa:4c:2b:df:47:
a5:bf:56:d3:a4:e5:b6:3d:f3:a0:d5:ff:2e:d9:01:
07:87:4b:61:e4:7d:50:84:6a:9a:5f:c0:0f:54:9b:
61:50:91:16:63:f1:31:2f:47:c4:ae:5b:ea:e0:fb:
a2:3c:41:32:74:34:a0:f5:ea:69:ba:e6:e6:6b:23:
ce:00:42:f8:60:7f:4b:12:1b:38:65:7e:aa:06:45:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1F:D2:FD:AE:ED:36:0A:41:74:F0:B9:D4:84:4B:56:23:43:FF:D0
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f6:21:13:c2:af:a2:58:09:4d:2f:24:b1:aa:46:d5:a2:91:
c2:3d:eb:54:e7:b2:25:90:94:0e:71:c8:08:6c:ea:27:69:c1:
ce:19:14:88:0a:fc:aa:bc:e0:d7:00:3e:cb:36:56:88:ae:d7:
5b:09:0b:45:90:eb:0e:6b:0c:0e:7a:fa:25:1b:e0:ed:f2:e9:
48:b6:4a:a4:8f:f8:ba:f6:6b:90:2a:fc:f2:65:2a:4a:cf:34:
70:0a:bd:ff:14:45:ac:02:a6:bc:24:ba:a5:9b:28:a5:7a:51:
32:05:4a:b6:bf:12:0c:64:90:66:17:8f:c4:4a:7e:97:ec:3d:
8c:d6:f1:f3:39:b0:c8:a7:9b:5c:e0:70:f1:43:68:a5:12:c0:
14:e9:b5:78:41:b2:ca:cd:97:6c:ca:49:38:95:aa:4d:4f:13:
af:b2:9a:31:46:95:00:93:43:d4:83:0d:11:ec:03:ae:30:c3:
57:26:a4:ea:95:d2:12:49:d3:b7:bf:cc:1c:ea:12:05:cb:a4:
a3:38:86:20:27:73:27:a4:f4:b9:ab:86:b2:9e:2f:1e:95:f3:
84:95:f1:cf:73:b0:67:a1:48:8d:a2:31:ec:f0:4c:09:e8:77:
48:3e:43:60:0e:d9:d1:18:b4:e2:e9:72:fe:fe:6a:c1:8b:0e:
2c:dd:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:32:13 2026 by rpki-client